$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: Ybt5fC+cTuUjJANpuZQkxS6kAJnCuA293ItxSZXUBl4= Subject key identifier: 9D:FA:1A:27:75:5F:35:BF:9B:73:C8:84:59:AD:F1:FF:8C:C0:51:6F Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 39B089DDF5EA19DD075807B1272EEEDC73C0B8DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 016B Signing time: Mon 30 Jun 2025 14:31:33 +0000 Manifest this update: Mon 30 Jun 2025 14:26:33 +0000 Manifest next update: Fri 04 Jul 2025 00:40:33 +0000 Files and hashes: 1: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: 0FLUUVwTUN3G5KA1QUYquNR3VRf5oU/tjbJnABY38hY=) 2: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: kEwMr1mIRZGwTHrXfoM+k+XYrDWcsMsreXoEQMVJdUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 18:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b0:89:dd:f5:ea:19:dd:07:58:07:b1:27:2e:ee:dc:73:c0:b8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Jun 30 14:26:33 2025 GMT Not After : Jul 4 00:40:33 2025 GMT Subject: CN=9DFA1A27755F35BF9B73C88459ADF1FF8CC0516F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:ab:4f:aa:90:ae:a9:58:a2:7b:cb:fc:55: 17:cf:4d:3b:68:f3:0e:a5:82:5a:da:16:9a:3e:43: 78:fa:e0:2c:9e:6d:4b:37:a1:b9:a4:02:db:c9:d9: 15:8a:31:d6:68:43:eb:27:37:5f:c3:8f:c2:90:cc: 34:c9:d5:c2:a2:bd:9c:f1:1b:2a:f5:d9:2b:59:49: f4:1d:ba:d3:94:11:e8:01:67:8e:e8:73:2b:0a:14: ed:9c:80:b3:9d:37:c8:99:81:98:57:0b:05:83:6a: df:92:6d:64:90:a3:f2:b3:cd:0d:e2:e8:c2:cc:e2: a0:9e:15:da:94:53:fe:bc:24:13:07:da:74:dc:45: 44:95:2d:8f:95:da:cd:a7:92:c4:a2:79:9b:cd:1a: 3c:12:8c:4b:5c:e4:b3:8b:ab:ef:e5:f4:22:57:2c: 09:10:dc:42:7d:cd:04:c5:15:c6:a5:98:70:f6:52: 71:b1:a3:a6:f6:88:74:28:07:d8:0e:44:ce:f4:44: 45:61:f5:89:9f:85:2f:82:1e:36:17:ba:a4:d7:ca: b9:0a:b4:48:14:de:4a:d5:c6:3c:92:18:07:f0:15: 1a:7a:d8:5c:98:74:9f:10:5c:3f:ea:24:c9:b4:ef: fe:e5:fc:24:7a:e1:8d:72:be:8f:ee:48:10:60:61: 06:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FA:1A:27:75:5F:35:BF:9B:73:C8:84:59:AD:F1:FF:8C:C0:51:6F X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:91:4e:a1:67:e1:90:1e:2a:58:67:eb:b7:4d:49:ae:e8:2b: df:6b:57:0d:d9:59:66:41:59:c7:3f:47:4f:90:c6:83:cb:87: ba:5a:cb:0f:ef:c2:b3:f5:1a:5c:78:dc:8c:ce:81:80:ad:5c: dc:c3:ec:f2:bd:41:fd:25:ff:8a:6c:96:9e:17:9c:96:13:8a: 7e:fc:bd:c7:a2:c4:e9:b4:3b:ef:5c:1d:0c:3a:57:bd:0a:3c: 00:c4:8f:c5:1b:b0:08:6d:d7:40:09:17:85:a4:9e:a1:80:96: 04:ef:8b:d2:b9:76:3d:b9:02:5f:68:13:cb:b2:34:8d:4c:4d: dc:9b:0a:65:75:db:e6:1b:2b:bd:7a:32:11:64:db:a1:ae:59: 91:b6:b9:63:a5:de:92:77:a3:dd:e0:db:ce:bc:d2:dc:79:4a: cb:22:3c:5a:e4:dc:b6:d9:2d:f4:0c:84:fe:56:53:04:de:df: 3a:9f:a2:4b:db:0c:f7:82:8c:9c:f0:30:d2:93:76:a6:3a:c6: 6c:12:73:9a:e9:0f:45:58:9e:61:1f:58:c6:57:43:52:6d:f5: 0b:53:f8:a5:b7:3d:b0:4e:99:70:71:83:00:6d:5f:e7:da:30: ca:11:ad:a6:19:5b:02:cb:5f:02:05:38:c7:23:cf:1c:be:45: 8c:d4:96:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUObCJ3fXqGd0HWAexJy7u3HPAuN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNTA2MzAxNDI2MzNaFw0yNTA3MDQwMDQwMzNaMDMxMTAvBgNV BAMTKDlERkExQTI3NzU1RjM1QkY5QjczQzg4NDU5QURGMUZGOENDMDUxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ76tPqpCuqViie8v8VRfPTTto 8w6lglraFpo+Q3j64CyebUs3obmkAtvJ2RWKMdZoQ+snN1/Dj8KQzDTJ1cKivZzx Gyr12StZSfQdutOUEegBZ47ocysKFO2cgLOdN8iZgZhXCwWDat+SbWSQo/KzzQ3i 6MLM4qCeFdqUU/68JBMH2nTcRUSVLY+V2s2nksSieZvNGjwSjEtc5LOLq+/l9CJX LAkQ3EJ9zQTFFcalmHD2UnGxo6b2iHQoB9gORM70REVh9YmfhS+CHjYXuqTXyrkK tEgU3krVxjySGAfwFRp62FyYdJ8QXD/qJMm07/7l/CR64Y1yvo/uSBBgYQYtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnfoaJ3VfNb+bc8iEWa3x/4zAUW8wHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuRTqFn4ZAeKlhn67dNSa7oK99rVw3ZWWZB Wcc/R0+QxoPLh7payw/vwrP1Glx43IzOgYCtXNzD7PK9Qf0l/4pslp4XnJYTin78 vceixOm0O+9cHQw6V70KPADEj8UbsAht10AJF4WknqGAlgTvi9K5dj25Al9oE8uy NI1MTdybCmV12+YbK716MhFk26GuWZG2uWOl3pJ3o93g28680tx5SssiPFrk3LbZ LfQMhP5WUwTe3zqfokvbDPeCjJzwMNKTdqY6xmwSc5rpD0VYnmEfWMZXQ1Jt9QtT +KW3PbBOmXBxgwBtX+faMMoRraYZWwLLXwIFOMcjzxy+RYzUlgQ= -----END CERTIFICATE-----Generated at Mon Jun 30 16:56:48 2025 by rpki-client